Vulnerability Reportpypy:2

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. Significant exposed findings include CVE-2026-49261, which could allow arbitrary code execution via MariaDB wsrep_notify_cmd, and CVE-2026-44172, which could allow SQL injection when big5 character handling is used. An attacker could execute arbitrary code, inject SQL, or otherwise compromise applications built on this base if those components are exposed. Note that CVE-2026-49261 only applies when wsrep_notify_cmd is enabled, and disabling that setting fully eliminates the issue; CVE-2026-44172 requires big5 character set usage with mysql_real_escape_string(). Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.